Red Hat Ceph Storage/OpenStack Platform ipa_getkeytab bind_pw missing encryption

Summaryinfo

A vulnerability was found in Red Hat Ceph Storage and OpenStack Platform. It has been classified as problematic. This issue affects some unknown processing of the component ipa_getkeytab. This manipulation of the argument bind_pw causes missing encryption. This vulnerability is tracked as CVE-2026-80158. The attack is restricted to local execution. No exploit exists.

Detailsinfo

A vulnerability classified as problematic was found in Red Hat Ceph Storage and OpenStack Platform (unknown version). Affected by this vulnerability is an unknown code block of the component ipa_getkeytab. The manipulation of the argument bind_pw with an unknown input leads to a missing encryption vulnerability. The CWE definition for the vulnerability is CWE-311. The product does not encrypt sensitive or critical information before storage or transmission. As an impact it is known to affect confidentiality. The summary by CVE is:

A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's "Invoked with" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw <value>), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.

The advisory is shared at access.redhat.com. This vulnerability is known as CVE-2026-80158 since 08/25/2026. The exploitation appears to be difficult. An attack has to be approached locally. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/27/2026). MITRE ATT&CK project uses the attack technique T1600 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-66808). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Cloud Software

Vendor

• Red Hat

Name

• Ceph Storage
• OpenStack Platform

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion